Mobile health and privacy: cross sectional study

Gioacchino Tangari, Muhammad Ikram*, Kiran Ijaz, Mohamed Ali Kaafar, Shlomo Berkovsky

*Corresponding author for this work

Research output: Contribution to journalArticlepeer-review

2 Citations (Scopus)
7 Downloads (Pure)

Abstract

Objectives: To investigate whether and what user data are collected by health related mobile applications (mHealth apps), to characterise the privacy conduct of all the available mHealth apps on Google Play, and to gauge the associated risks to privacy. 

Design: Cross sectional study 

Setting: Health related apps developed for the Android mobile platform, available in the Google Play store in Australia and belonging to the medical and health and fitness categories.

Participants: Users of 20 991 mHealth apps (8074 medical and 12 917 health and fitness found in the Google Play store: In-depth analysis was done on 15 838 apps that did not require a download or subscription fee compared with 8468 baseline non-mHealth apps.

Main outcome measures: Primary outcomes were characterisation of the data collection operations in the apps code and of the data transmissions in the apps traffic; analysis of the primary recipients for each type of user data; presence of adverts and trackers in the app traffic; audit of the app privacy policy and compliance of the privacy conduct with the policy; and analysis of complaints in negative app reviews. 

Results: 88.0% (n=18 472) of mHealth apps included code that could potentially collect user data. 3.9% (n=616) of apps transmitted user information in their traffic. Most data collection operations in apps code and data transmissions in apps traffic involved external service providers (third parties). The top 50 third parties were responsible for most of the data collection operations in app code and data transmissions in app traffic (68.0% (2140), collectively). 23.0% (724) of user data transmissions occurred on insecure communication protocols. 28.1% (5903) of apps provided no privacy policies, whereas 47.0% (1479) of user data transmissions complied with the privacy policy. 1.3% (3609) of user reviews raised concerns about privacy. 

Conclusions: This analysis found serious problems with privacy and inconsistent privacy practices in mHealth apps. Clinicians should be aware of these and articulate them to patients when determining the benefits and risks of mHealth apps.

Original languageEnglish
Article numbern1248
Pages (from-to)1-12
Number of pages12
JournalThe BMJ
Volume373
DOIs
Publication statusPublished - 2021

Bibliographical note

Version archived for private and non-commercial use with the permission of the author/s and according to publisher conditions. For further rights please contact the publisher.

Fingerprint

Dive into the research topics of 'Mobile health and privacy: cross sectional study'. Together they form a unique fingerprint.

Cite this